$ rpki-client -vvf rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa File: 323830343a353865383a3a2f33322d313238203d3e20323638313537.roa (raw, json) Hash identifier: OU8BysWn04Vw4x1gVBW2TcuCMT9H/BN4P7JbHYazGvs= Subject key identifier: 04:3E:02:49:58:A3:3A:A5:9C:EA:41:CA:43:78:DC:2E:7D:3C:ED:66 Certificate issuer: /CN=B78D12505DFB9EF85E934BA596A45C5630CC2195 Certificate serial: 659B3C014265C2BB2E629B2E92765AB6A26499CB Authority key identifier: B7:8D:12:50:5D:FB:9E:F8:5E:93:4B:A5:96:A4:5C:56:30:CC:21:95 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78D12505DFB9EF85E934BA596A45C5630CC2195.cer Subject info access: rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa Signing time: Fri 25 Apr 2025 17:01:10 +0000 ROA not before: Fri 25 Apr 2025 16:56:10 +0000 ROA not after: Fri 24 Apr 2026 17:01:10 +0000 asID: 268157 IP address blocks: 2804:58e8::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/B78D12505DFB9EF85E934BA596A45C5630CC2195.crl rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/B78D12505DFB9EF85E934BA596A45C5630CC2195.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78D12505DFB9EF85E934BA596A45C5630CC2195.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Nov 2025 06:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9b:3c:01:42:65:c2:bb:2e:62:9b:2e:92:76:5a:b6:a2:64:99:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B78D12505DFB9EF85E934BA596A45C5630CC2195 Validity Not Before: Apr 25 16:56:10 2025 GMT Not After : Apr 24 17:01:10 2026 GMT Subject: CN=043E024958A33AA59CEA41CA4378DC2E7D3CED66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2f:51:c9:55:ff:82:ad:31:87:3d:c9:b1:4d: 96:08:72:35:e6:16:4b:22:3f:83:78:6d:36:d9:33: 01:0e:a8:c7:ff:bb:51:4d:64:98:58:6e:53:0b:65: 4e:57:f3:9f:1b:2b:88:c9:c3:3d:e9:c1:23:de:5e: 65:8a:02:da:2d:97:1d:a3:1d:72:3e:71:db:84:94: 63:42:18:90:1a:cb:5e:46:36:46:ca:1c:c5:d7:d2: e6:e4:10:67:6c:4b:9e:39:07:76:8c:8b:3c:7c:bd: 70:75:cf:c9:1a:d5:37:b8:bb:70:9c:9b:31:f6:2c: a6:ff:20:85:9f:9c:80:76:eb:df:20:fc:02:3c:bf: 75:41:9e:3a:31:78:d2:fc:8b:7a:37:86:25:a3:af: 59:2a:1a:15:61:b7:7d:9a:03:af:d8:4d:18:0e:dd: 6d:61:01:f2:a1:dd:7c:8b:bc:e1:cc:bb:44:56:4f: 4c:8b:0a:ad:9d:c2:cf:60:17:a6:d7:16:9d:fc:04: b0:dd:e2:5f:2a:71:0c:fb:ba:77:f7:65:d5:c3:52: ec:58:d3:25:6e:07:24:52:b8:8f:f7:a7:0c:05:9f: 1d:26:1c:7f:aa:5f:d2:7b:ea:49:74:3d:95:f3:e8: dc:62:3f:ef:45:1c:d0:14:c5:1d:da:76:04:8f:d8: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:02:49:58:A3:3A:A5:9C:EA:41:CA:43:78:DC:2E:7D:3C:ED:66 X509v3 Authority Key Identifier: keyid:B7:8D:12:50:5D:FB:9E:F8:5E:93:4B:A5:96:A4:5C:56:30:CC:21:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/B78D12505DFB9EF85E934BA596A45C5630CC2195.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B78D12505DFB9EF85E934BA596A45C5630CC2195.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMB57AGjN59A311ttLmEW5ScpaqYnK7rdRq3PVW3WqqY/0/323830343a353865383a3a2f33322d313238203d3e20323638313537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:58e8::/32 Signature Algorithm: sha256WithRSAEncryption 32:e3:27:9a:a9:7c:cc:87:38:93:8e:01:e7:0b:09:b9:94:02: 13:ee:c4:00:54:95:1c:f7:f4:61:9c:c8:a7:55:84:17:84:c6: 47:69:fd:52:b2:f2:1a:d5:fd:ef:d6:44:11:70:7f:c8:40:71: d0:5f:e5:bf:2a:a7:08:38:cd:8c:b9:ff:75:d1:94:10:f3:aa: 97:7e:71:d1:cc:b8:b7:c1:7f:f9:e4:47:c2:e8:c5:0a:51:f0: 40:92:7f:58:74:c1:41:c6:40:ea:ff:f3:96:ec:f0:20:a3:f7: b8:fc:58:d1:0a:87:77:b2:48:15:bd:77:9f:7d:79:40:df:50: d8:6c:ff:9c:ea:a8:4d:99:f3:9c:7b:45:70:6c:0b:e7:16:d7: 33:b8:04:88:dd:16:c5:e4:f6:df:d0:b1:6e:a8:cd:3d:ee:cb: df:51:4b:86:af:6e:15:bb:21:c0:72:79:b1:a9:1b:f7:3d:af: 95:04:c1:18:59:b3:d4:b2:f3:80:29:c9:a3:c7:eb:43:56:b0: 57:3f:d1:27:3c:e4:30:12:c0:79:c5:7e:d7:64:07:24:b3:fd: 3f:16:83:25:07:21:ca:c7:b2:75:44:10:7a:84:4f:15:f1:26: fb:1e:bf:70:95:7d:22:37:d3:73:e2:c4:5d:f2:85:c7:d5:4f: 7c:a5:26:ea -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUZZs8AUJlwrsuYpsuknZatqJkmcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc4RDEyNTA1REZCOUVGODVFOTM0QkE1OTZBNDVDNTYz MENDMjE5NTAeFw0yNTA0MjUxNjU2MTBaFw0yNjA0MjQxNzAxMTBaMDMxMTAvBgNV BAMTKDA0M0UwMjQ5NThBMzNBQTU5Q0VBNDFDQTQzNzhEQzJFN0QzQ0VENjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSL1HJVf+CrTGHPcmxTZYIcjXm FksiP4N4bTbZMwEOqMf/u1FNZJhYblMLZU5X858bK4jJwz3pwSPeXmWKAtotlx2j HXI+cduElGNCGJAay15GNkbKHMXX0ubkEGdsS545B3aMizx8vXB1z8ka1Te4u3Cc mzH2LKb/IIWfnIB2698g/AI8v3VBnjoxeNL8i3o3hiWjr1kqGhVht32aA6/YTRgO 3W1hAfKh3XyLvOHMu0RWT0yLCq2dws9gF6bXFp38BLDd4l8qcQz7unf3ZdXDUuxY 0yVuByRSuI/3pwwFnx0mHH+qX9J76kl0PZXz6NxiP+9FHNAUxR3adgSP2P8ZAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUBD4CSVijOqWc6kHKQ3jcLn087WYwHwYDVR0j BBgwFoAUt40SUF37nvhek0ullqRcVjDMIZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSE1CNTdBR2pONTlBMzExdHRMbUVXNVNjcGFxWW5LN3JkUnEzUFZXM1dx cVkvMC9CNzhEMTI1MDVERkI5RUY4NUU5MzRCQTU5NkE0NUM1NjMwQ0MyMTk1LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3OEQxMjUwNURGQjlFRjg1 RTkzNEJBNTk2QTQ1QzU2MzBDQzIxOTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hNQjU3QUdqTjU5QTMxMXR0TG1FVzVTY3BhcVluSzdyZFJxM1BWVzNXcXFZLzAv MzIzODMwMzQzYTM1Mzg2NTM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2 MzgzMTM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAoBFjoMA0GCSqGSIb3DQEBCwUAA4IBAQAy4yea qXzMhziTjgHnCwm5lAIT7sQAVJUc9/RhnMinVYQXhMZHaf1SsvIa1f3v1kQRcH/I QHHQX+W/KqcIOM2Muf910ZQQ86qXfnHRzLi3wX/55EfC6MUKUfBAkn9YdMFBxkDq //OW7PAgo/e4/FjRCod3skgVvXeffXlA31DYbP+c6qhNmfOce0VwbAvnFtczuASI 3RbF5Pbf0LFuqM097svfUUuGr24VuyHAcnmxqRv3Pa+VBMEYWbPUsvOAKcmjx+tD VrBXP9EnPOQwEsB5xX7XZAcks/0/FoMlByHKx7J1RBB6hE8V8Sb7Hr9wlX0iN9Nz 4sRd8oXH1U98pSbq -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:33 2025 by rpki-client